Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's handling of shadow stacks has been addressed. The issue arose because the function shstk_pop_sigframe() failed to properly check for errors from mmap_read_lock_killable(). This oversight indicated that these functions had not been marked with '__must_check', which would have prevented the error. The vulnerability is present in the Linux kernel stable tree.
The vulnerability could lead to improper error handling, potentially allowing for issues in memory management or process signaling to be exploited.
Users can upgrade to the latest version of the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.